Skip to content
PMInterviewKit
← All questions
AI productstretch

Your company wants an AI assistant that answers employee questions from all internal documents. What could go wrong, and how would you prevent it?

How to approach it

Sort the risks before listing them. Showing a document to someone who shouldn't see it usually matters more than an occasional wrong answer, so start there.

How a strong answer opens

“The biggest risk I see isn't a wrong answer, it's a right answer shown to the wrong person. If the assistant can read every document, it could surface salaries or legal files to anyone who asks.”

Outline of a strong answer

Try answering out loud for a few minutes before you open this.

  1. Sort risks by likelihood and harm: data leaks, wrong answers, hidden instructions, over-reliance
  2. Make retrieval respect each employee's existing document permissions
  3. Keep sensitive sources, such as HR and legal files, out of scope at launch
  4. Defend against instructions hidden inside documents (prompt injection)
  5. Show sources with every answer so employees can check them
  6. Red-team before launch, then monitor flagged answers and access patterns

Where this question usually goes wrong

Focusing only on wrong answers and forgetting that retrieval must respect document permissions and that documents can carry hidden instructions.

Learn the method

Risk, safety and trust in Module 7, AI product interviews.

The full kit has worked answers in full, start to finish, for every round type. $129 once.

Get one email when the full kit opens

No spam: just one launch email. See our privacy policy.